or randos on the internet then?
I mean isn’t that practically everyone on the Internet that you don’t know personally? Or do you actually know the Firefox and/or Librewolf team, and audit their code as well?
If no to both…sounds like you are putting some measure of trust into “randos on the Internet.” Which is not abnormal. Trust is required at some point in most processes.
My thing against Firefox/Librewolf is lack of security…unless it’s improved?
Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox’s sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn’t happening for their Android browser yet.
old system of writing them down on paper
That’s harder to steal/hack by someone across the globe.
The Human Cannonball? He got launched out of the cannon and did one flip before getting caught by the net.
That’s what it looks like to the untrained eye. But they’re not really going to fire a person out of a cannon. That’s not safe. So he just huddles in the cannon, they light a decoy fuse, it makes a bang (with no projectile), and he spring out and jumps that distance by himself. Requires a lot of core and leg strength.
If I choose a US server, I want to know I’m going to get the US version of a site.
Which is not necessarily something that Proton (or any other VPN provider) can impact.
deleted by creator
all media organisations use X
NPR quits Twitter after being falsely labeled as ‘state-affiliated media’
Your data has monetary value to google. Giving them access, without getting any money from them (or even knowing what ways it will be used) is not something you must do.
To be fair, while you may not be getting money in its direct form (cash, bank deposit, etc) from Google, they are providing you a service which costs them money for free. So they are providing something of monetary value.
Only the individual can determine if their data is worth that free (to the individual, not free to Google) service. I’m assuming that most people in a privacy community would be against that, though.
CalyxOS relocks the bootloader and they supported the FP5 right after launch.
CalyxOS is not a hardened OS, and GrapheneOS requires more than than just relocking the bootloader.
Fairphone’s devices do not meet basic security requirements for hardware, firmware and the software device support including drivers. Please look at the hardware requirements at https://grapheneos.org/faq#future-devices and check for yourself how many of those are provided by the Fairphone. Even the Fairphone 5 has a CPU core from 2021 without even PAC and BTI.
You can still be part of a project without being lead, to be part of the “we.” Did he contribute and/or is he part of GrapheneOS, yes? So he’s part of the “we.”
Or does only the lead developer get the “we?” Wouldn’t that make it more of an “I” instead?
Thai article reminded me to buy (and hopefully beat) KCD before KCDII comes out in Feb 2025.
On the Xbox store, the DLC bundle (no game) was normally $20, but 75% off so it was only $5. The game+DLC bundle was normally $40, but it was 90% off so it was only $4. Easy choice, even if I already had the game and no DLC
about which distro to use and got a range of suggestions but none of them were arch.
I think Debian is usually the strongest contender here.
I’d love to have working NFC pay
NFC works. NFC payment is dependent on the app as some block those that fail Play Integrity / Google certification. Google Wallet / Pay does not work for payment because Google blocks it.
Anker Prime Charger (250W, 6 Ports, GaNPrime): $169.99 but there’s a $30 code that shows up for me, which brings it to one penny below your $140 too steep threshold.
Do you have Google services installed? I use MicroG…
Yes, I have Google Plays Services, Google Services Framework, and the Google Play Store installed, which are all sandboxed. MicroG isn’t supported by GrapheneOS.
Nope, nor do I intend to. GrapheneOS frowns upon rooting and modifying the system as it typically widens your attack surface. I’m not using a secure OS then going around to purposefully make it less secure.
but I’m concerned RCS is going to become a deal break for me
For what it’s worth, I have RCS working with GrapheneOS. I don’t think I did anything special, but it did take awhile. I did see stuff on their forum about others having a bigger issue with it, though.
And of course, I prefer Signal, where possible.
Even just being rooted on the stock Pixel rom is a fight.
That, I can see being more of an issue than an unmodified, trusted 3rd party OS. If I remember right, rooting makes the device fail Verified Boot:
It establishes a full chain of trust, starting from a hardware-protected root of trust to the bootloader, to the boot partition and other verified partitions including system, vendor, and optionally oem partitions.
https://source.android.com/docs/security/features/verifiedboot
I’ve got old apps that won’t work any more.
I’m actually for this. The bar to entry for the Play Store is too low with too many low quality and unmaintained apps. I’m all for booting insecure and super old apps. They cheapen the ecosystem.
And hopefully does something about. Disciplinary for the poor OPSEC and/or better resources to avoid it and/or better laws to stop this unfettered data collection and/or better training to avoid it in the future. Here’s hoping. Holds breath